Part 11 myths that refuse to die

Part 11 is short. You can read it over coffee. And yet a regulation of barely three pages has generated a quarter century of folklore, most of it expensive, some of it actively harmful. The myths persist because they are usually taught by inheritance: someone's first validation lead believed it, so now they do too.

Why the folklore wins

Three reasons. First, the regulation predates almost everything we run today, so people fill the gaps with guesses. Second, FDA's 2003 scope-and-application guidance narrowed enforcement in ways many SOPs never absorbed. Third, vendors discovered that Part 11 compliant is a sticker that sells, even though a product alone can never be compliant. Compliance lives in how you use the system: procedures, training, controls. The vendor supplies capabilities; you supply the compliance.

The most expensive myth is probably the belief that every system touching GxP data falls under Part 11 in full. The 2003 guidance is explicit that the rule applies to records required by predicate rules, kept in electronic form in place of paper. The predicate rule, the GMP, GLP or GCP regulation that requires the record in the first place, decides what must be kept. Part 11 only governs how, and only where electronic records replace paper ones.

Rather than list the remaining myths and spoil the fun, test yourself. Eight claims, all heard in real meetings. Call each one myth or fact, and see how deep the folklore runs in your own training history.

If you scored perfectly, congratulations: you are now obligated to gently correct the next person who tells you electronic signatures require biometrics. The folklore only dies when someone in the room says so.